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Amendments to the Claims : 

This listing of claims will replace all prior versions and listings of claims in the above- 
identified application. 

Listing of Claims : 

1 . (Currently amended) A method of detecting intrusion attempts on a computing: 
system, comprising t h e st eps-ef : 

creating a first mapping profile of a valid password, wherein the valid password is 
entered on a keyboard and the first mapping profile is dependent upon 
characters of the valid password; 
storing the mapping profile in memory; 

creating a second mapping profile of an entered password, wherein the entered 
password is entered on the keyboard and the second mapping profile is 
dependent upon characters of the entered password; 

calculating a profile score by comparing the first mapping profile to the second 
mapping profile; 

comparing the profile score to a threshold value; and 

classifying the entered profile into one of two or more security classifications 
based upon the comparison between the profile score and the threshold 
value ; and 

wherein the first mapping and the second mapping each comprise : 
comparing successive characters of the respective password; 
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assigning a value to each pair of successive characters based upon a 
keyboard characteristic corresponding to the pair of successive 
characters; and 

generating a password mapping for the respective password based upon 
the assigned values and 
wherein the keyboard characteristic is the distance between keys of the keyboard 
representing the pair of characters . 

2 . (Original) The method of claim 1 , wherein at least one of the securi ty 
classifications represents an intrusion attempt on the computing system. 

3-5. (Canceled) 

6. (Currently amended) The method of claim 3, wherein the second mapping step 
further compris e the step of comprises : 

comparing the valid password to the entered password; and determining when a 
pair of characters in the entered password are a transposition of a 
corresponding pair of letters in the valid password; and, when there is a 
transposition, adjusting the profile score. 

7. (Original) The method of claim 1 , wherein the computing system is a 
personal computer. 
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8. (Original) The method of claim 1 , wherein the computing system is a 
telephone voice response system. 

9. (Currently amended) A password protection system, comprising: 

a first mapping profile corresponding to a valid password, wherein the valid 
password is entered on a keyboard and the first mapping profile is 
dependent upon characters of the valid password; 

a second mapping profile corresponding to an entered password, wherein the 
entered password is entered on the keyboard and the second mapping 
profile is dependent upon characters of the entered password; 

a profile score based upon a comparison of the first mapping profile and the 
second mapping profile; 

a threshold value; and 

two or more security classifications; and 

logic for assigning the profile score to one of the two or more security 

classifications based upon a comparison between the profile score and the 
threshold value; and 

wherein 

each of the first and second mapping are generated by comparing 
successive characters of the respective password. 
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assignin g a value to each pair of successive characters based upon a 

keyboard characteristic corresponding to the pair of successive : 
characters, and 

generating the respective password mapping based upon the assigned 
values; and 

wherein the keyboard characteristic is the distance between keys of the keyboard 
representing the pair of characters . 

10. (Original) The system of claim 9, wherein at least one of the security 
classifications represents an attempted intrusion. 

11-13. (Canceled) 

1 4 (Original) The system of claim 9, wherein the profile score is also based upon 
whether or not any two succ essive characters of the entered password are transpositions of two,; 
corresponding characters of the valid password. 

15. (Currently amended) A computer program product for detecting intrusion 
attempts on a computing system, comprising: 
a memory; 

logic, stored on the memory, for creating a first mapping profile of a valid 

password, wherein the valid password is entered on a keyboard and the 
first mapping profile is dependent upon characters of the valid password; 
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logic, stored on the memory, for storing the mapping profile in a memory; 

logic, stored on the memory, for creating a second mapping profile of an entered 
password, wherein the entered password is entered on the keyboard and : 
the second mapping profile is dependent upon characters of the entered : 
password; 

logic, stored on the memory, for calculating a profile score by comparing the first 

mapping profile to the second mapping profile; 
logic, stored on the memory, for comparing the profile score to a threshold value; 
logic, stored on the memory, for classifying the entered profile into one of two or 
more security classifications based upon the comparison between the 
profile score and the threshold value; and 
logic, stored on the memory, for either enabling or preventing access to the 

computing system based upon the security classification ; and 
wherein the first mapping step and the second mapping step each comprise: 

logic, stored on the memory, for comparing successive characters of the 

respective password: 
logic, stored on the memory, for assigning a value to each pair of 
successive characters based upon a keyboard characteristic 
corresponding to the pair of successive characters; and 
logic, stored on the memory, for generating a password mapping for the 
respective password based upon the assigned values; and 
wherein the keyboard characteristic is the distance between keys of the keyboard 
re presenting the pair of characters . 
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1 6. (Original) The computer program product of claim 15, wherein at least one of 
the security classifications represents an intrusion attempt on the computing system. 



1749. (Canceled) 



20. (Currently amended) The computer program product of claim 1 7, wherein the ; 
second mapping step further comprises: 

logic, stored on the memory, for comparing the valid password to the entered 
password; and 

logic, stored on the memory, for determining when a pair of characters in the 
entered password are a transposition of a corresponding pair of letters in 
the valid password; and, when there is a transposition, logic, stored on the 
memory, for adjusting the profile score. 
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